wdatpprd-canc.securitycenter.windows.com

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 02

About this certificate

This digital certificate with serial number 33:00:d7:48:cf:b1:55:cc:af:63:3a:60:e5:00:00:00:d7:48:cf was issued on by Microsoft Corporation.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 33:00:d7:48:cf:b1:55:cc:af:63:3a:60:e5:00:00:00:d7:48:cf
Serial Number (int): 1137411262616767712459251096921220754798233807
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: f0:e9:9e:9d:b9:e4:c4:31:c7:b6:0e:30:91:60:ca:fa:0d:e3:1b:6c
AuthorityKeyId: 00:ab:91:fc:21:62:26:97:9a:a8:79:1b:61:41:90:60:a9:62:67:fd

Fingerprint (sha1): a0:fd:08:2a:c6:25:e9:e6:65:8e:49:b3:17:e9:b9:5b:b1:71:9c:11
Fingerprint (sha256): 04:1d:2f:7c:e3:c6:6a:df:11:9e:ae:07:dd:03:fa:d9:e9:6f:62:4c:62:97:12:80:1d:53:ad:f8:6f:7b:a0:fd

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.crl

Check the revocation status for certificate wdatpprd-canc.securitycenter.windows.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wdatpprd-canc.securitycenter.windows.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

12 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wdatpprd-canc.securitycenter.windows.com
wdatpprd-cane.securitycenter.windows.com
wdatpprd-can.securitycenter.windows.com
mde-cloud-papin-can-canc.securitycenter.windows.com
mde-cloud-papin-can-cane.securitycenter.windows.com

Other certificates including the domain name windows.com

(limited to 100 certificates)
wdatpprd-jpe.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
ingress.wdatpstg.windows.com
wdatpprd-cin.securitycenter.windows.com
wdatpprd-weu3.securitycenter.windows.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-cus.securitycenter.windows.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-weu.securitycenter.windows.com
wdatpprd-sin.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-neu.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-neu.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-cin.securitycenter.windows.com
CyberDataPrefetcher-PRD.trafficmanager.net
andrew.rancher.poc.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-aus.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
ti.securitycenter.windows.com
www.windowsphone.com
wdatpprd-sin.securitycenter.windows.com
*.wns.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-cus3.securitycenter.windows.com
CyberDataCtrl-PRD.trafficmanager.net
wdatpprd-cus3.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-cane.securitycenter.windows.com
CyberDataPrefetcher-PRD.trafficmanager.net
wdatpprd-cane.securitycenter.windows.com
wdatpprd-weu.securitycenter.windows.com
wdatpprd-uks.securitycenter.windows.com
wdatpprd-cane.securitycenter.windows.com
www.windowsphone.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-neu3.securitycenter.windows.com
heartbeat.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
wdatpprd-jpe.securitycenter.windows.com
ineportalapi-stg.trafficmanager.net
wdatpprd-cus3.securitycenter.windows.com
OnboardingService-PRD.trafficmanager.net
cache.datamart.windows.com
wdatpstg-eus2.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-cin.securitycenter.windows.com
WdatpApi-PRD.trafficmanager.net
akamai-san15.exacttarget.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-cus3.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
csharp.net
wdatpstg-eus2.securitycenter.windows.com
insidersurveys.windows.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-sin.securitycenter.windows.com
wdatpprd-ukw.securitycenter.windows.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-canc.securitycenter.windows.com
wdatpprd-neu3.securitycenter.windows.com
wdatpprd-swn0a.securitycenter.windows.com
wdatpprd-cus.securitycenter.windows.com
assets.activity.windows.com
wdatpprd-cus.securitycenter.windows.com
wdatpprd-cus.securitycenter.windows.com
wdatpprd-weu.securitycenter.windows.com
wdatpmdev-eus1.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
wdatpprd-weu.securitycenter.windows.com
wdatpprd-neu.securitycenter.windows.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-cane.securitycenter.windows.com
wdatpprd-neu3.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-cin.securitycenter.windows.com
wdatpprd-ukw.securitycenter.windows.com
wdatpprd-cane.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-swn0a.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-aue.securitycenter.windows.com
wdatpprd-jpe.securitycenter.windows.com
wdatpprd-cus3.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-sin.securitycenter.windows.com
wdatpstg-eus2.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com
wdatpprd-swn0a.securitycenter.windows.com
wdatpprd-eus3.securitycenter.windows.com
wdatpprd-sww0a.securitycenter.windows.com
wdatpprd-eus2.securitycenter.windows.com

Certificate

The complete raw certificate details for wdatpprd-canc.securitycenter.windows.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH2DCCBcCgAwIBAgITMwDXSM+xVcyvYzpg5QAAANdIzzANBgkqhkiG9w0BAQwF
ADBZMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u
MSowKAYDVQQDEyFNaWNyb3NvZnQgQXp1cmUgVExTIElzc3VpbmcgQ0EgMDIwHhcN
MjMxMTA2MTgzNTU4WhcNMjQwNjI3MjM1OTU5WjB/MQswCQYDVQQGEwJVUzELMAkG
A1UECBMCV0ExEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBD
b3Jwb3JhdGlvbjExMC8GA1UEAxMod2RhdHBwcmQtY2FuYy5zZWN1cml0eWNlbnRl
ci53aW5kb3dzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKyi
DjGXQy8+poJeU3v57y1FSM9CRbaL+fxBZBBm16QY2LX7krO1C72C+oh2d9OJxpET
ojCY2gacWBx07Uy0//p4nzigthXZjWpD7pki4J/eYM9AfY9ccu4yDLtDSM+J71Cp
CVWIn+x/ddEsO6U/Ns7RITZcsHIOxKgpTGUBriRsE4w/zLv+jQeqh9ZfgbYKiQSK
nNjd/6YaJwbI7trFaJvb9pPiSBXWXO5POhgQqANO9EkrNV+BPae7Q+hLI4H9XTWG
LLabKtcC1Uxpfo+MzauQEdAb1Pciro/Z3FN9qvaYTlzuN+Wv0ts6bsQL4DL6urZy
KjkZp98nIJYJCIChx0kCAwEAAaOCA3EwggNtMBMGCisGAQQB1nkCBAMBAf8EAgUA
MCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwIwCgYIKwYBBQUHAwEwPAYJKwYB
BAGCNxUHBC8wLQYlKwYBBAGCNxUIh73XG4Hn60aCgZ0ujtAMh/DaHV2ChOVpgvOn
PgIBZAIBJjCBrgYIKwYBBQUHAQEEgaEwgZ4wbQYIKwYBBQUHMAKGYWh0dHA6Ly93
d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQXp1cmUl
MjBUTFMlMjBJc3N1aW5nJTIwQ0ElMjAwMiUyMC0lMjB4c2lnbi5jcnQwLQYIKwYB
BQUHMAGGIWh0dHA6Ly9vbmVvY3NwLm1pY3Jvc29mdC5jb20vb2NzcDAdBgNVHQ4E
FgQU8OmenbnkxDHHtg4wkWDK+g3jG2wwDgYDVR0PAQH/BAQDAgWgMIHyBgNVHREE
geowgeeCKHdkYXRwcHJkLWNhbmMuc2VjdXJpdHljZW50ZXIud2luZG93cy5jb22C
KHdkYXRwcHJkLWNhbmUuc2VjdXJpdHljZW50ZXIud2luZG93cy5jb22CJ3dkYXRw
cHJkLWNhbi5zZWN1cml0eWNlbnRlci53aW5kb3dzLmNvbYIzbWRlLWNsb3VkLXBh
cGluLWNhbi1jYW5jLnNlY3VyaXR5Y2VudGVyLndpbmRvd3MuY29tgjNtZGUtY2xv
dWQtcGFwaW4tY2FuLWNhbmUuc2VjdXJpdHljZW50ZXIud2luZG93cy5jb20wDAYD
VR0TAQH/BAIwADBkBgNVHR8EXTBbMFmgV6BVhlNodHRwOi8vd3d3Lm1pY3Jvc29m
dC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBBenVyZSUyMFRMUyUyMElzc3Vp
bmclMjBDQSUyMDAyLmNybDBmBgNVHSAEXzBdMFEGDCsGAQQBgjdMg30BATBBMD8G
CCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3Mv
UmVwb3NpdG9yeS5odG0wCAYGZ4EMAQICMB8GA1UdIwQYMBaAFACrkfwhYiaXmqh5
G2FBkGCpYmf9MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATANBgkqhkiG
9w0BAQwFAAOCAgEAkVxRLJzPod3eqIDHP5QKQaKYXT5v3t0U1cxd0GElBGmwvIk5
fS+FyhKkCOIiaWbzuPYkYtuQd7w+72MLWIHLCoo2D9p0U3eafCI6oAoY4aBS08Ib
nabgrgORAMpS86r1BgH9083dLktIYto1sNxLNplugPN/4FrsCtq2Xt/vQUx2HPQI
2dzy4SQ7aGd8aLReV+L4PqB8g8WZGeNYifUrHVKmcQw6O4+Nwv40VBLLzM59/6nk
M7fjBFmc4NWXILoVVErmPcQTIqr/tcOnzZqvhY3f1tcxYEAjPu/5Nd1KtHzeLweI
dCSVD3OAEbrKMxeuDcMi18e9+BhyPSM7Z5w+4oARXMMCPgq5FKt9FkoU4bkdLBE+
XDw3VoZCAR2gFAN1P60NNqu0SjzcfwT3oEeCJqrb6ACQcibPo2Yu2s59AmcVUAMd
bjlIxvdJ+WXmraXiR66NpQzaGW0OeyFIJZe5KE8ZlsHVxaaArc3ChTbFg8snODFw
CV9ChNTwP4ofODlgUSMunsArKnbHvXkFkuaxe6Lwm7Fv7OGe0pyKEzET0+1VjKGZ
NmIh4fcyQJelmNk1G+052pxbcwowQ4IXzvDevgW7yOFKW5Q0LgwEBVWMPI3k9ZGm
tighlEngoDq4JriHl8hSrG27mCBoAcFfVGDMRZmj2upRQKkRoVjvHCjb3WY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKIOMZdDLz6mgl5Te/nv
LUVIz0JFtov5/EFkEGbXpBjYtfuSs7ULvYL6iHZ304nGkROiMJjaBpxYHHTtTLT/
+nifOKC2FdmNakPumSLgn95gz0B9j1xy7jIMu0NIz4nvUKkJVYif7H910Sw7pT82
ztEhNlywcg7EqClMZQGuJGwTjD/Mu/6NB6qH1l+BtgqJBIqc2N3/phonBsju2sVo
m9v2k+JIFdZc7k86GBCoA070SSs1X4E9p7tD6Esjgf1dNYYstpsq1wLVTGl+j4zN
q5AR0BvU9yKuj9ncU32q9phOXO435a/S2zpuxAvgMvq6tnIqORmn3ycglgkIgKHH
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137411262616767712459251096921220754798233807
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-06 18:35:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wdatpprd-canc.securitycenter.windows.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21792900972075760769907046466292296476276619045736956482888825068769717417237267637891024576820420435542553326694188246225812469426801824211564445163022769324511625658984254762266180809708604139257767185062817120380244938463374237606295606198286448705683438539020599804003175801116584141615996963141363379581627079407278283440456159613664051880103003801707230187438624407714728130348214917981912000191756553315046483211023088442333921809296216290609773804183186919349894199747806691826033154675573831852474735567945763353375837564850812641815537222728800745830596429529813494674484112897891754781587913396356464625481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0e99e9db9e4c431c7b60e309160cafa0de31b6c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (234 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdatpprd-canc.securitycenter.windows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdatpprd-cane.securitycenter.windows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdatpprd-can.securitycenter.windows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mde-cloud-papin-can-canc.securitycenter.windows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mde-cloud-papin-can-cane.securitycenter.windows.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2002.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 00ab91fc216226979aa8791b61419060a96267fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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